| Package | Affected versions | Patched versions |
|---|---|---|
| ie | = 5.0= 5.22= 6.0 | |
| internet explorer | = 3.0= 3.0.1= 3.0.2= 3.1= 3.2= 4.0= 4.0.1= 4.01= 4.1= 4.40.308= 4.40.520= 4.5= 4.70.1155= 4.70.1158= 4.70.1215= 4.70.1300= 4.71.1008.3= 4.71.1712.6= 4.71.544= 4.72.2106.8= 4.72.3110.8= 4.72.3612.1713= 5= 5.0= 5.0.1= 5.00.0518.10= 5.00.0910.1309= 5.00.2014.0216= 5.00.2314.1003= 5.00.2614.3500= 5.00.2919.3800= 5.00.2919.6307= 5.00.2919.800= 5.00.2920.0000= 5.00.3103.1000= 5.00.3105.0106= 5.00.3314.2101= 5.00.3315.1000= 5.00.3502.1000= 5.00.3700.1000= 5.01= 5.1= 5.2.3= 5.5= 5.50.3825.1300= 5.50.4030.2400= 5.50.4134.0600= 5.50.4308.2900= 5.50.4522.1800= 5.50.4807.2300= 6= 6.0= 6.0.2600= 6.0.2800= 6.0.2800.1106= 6.0.2900= 6.0.2900.2180= 6.00.2462.0000= 6.00.2479.0006= 6.00.2800.1106= 6.00.2900.2180= 6.00.3663.0000= 6.00.3790.0000= 6.00.3790.1830= 6.00.3790.3959= 7= 7.0= 7.0.5730.11= 7.00.5730.1100= 7.00.6000.16386= 7.00.6000.16441 |
Microsoft Internet Explorer before 8 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free